NISS_Draft_RFP-1.pdf

Section B - Supplies or Services and Prices !!!

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

0001 UNDEFINED Months

Labor

CPFF

The contractor shall provide all the labor assoicated with providing the NISS solution FOB: Destination

MAX

COST

FIXED

FEE

TOTAL MAX COST +

FEE

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

0002 1 Each

Software

FFP

To include necessary software, licenses, and maintenance for the NISS solution. All inclusive price.

FOB: Destination

MAX

NET AMT

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

0003 UNDEFINE

D

Each

Travel

COST

The travel associated with is CLIN shall be in accordance with FAR 31.205-46. The cost constraint is a Not to Exceed amount of

$XXXXXXX.

FOB: Destination

MAX COST

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

0004 1 Each

Contractor Manpower Report

FFP

The contractor shall comply with the Department of Defense's Contractor Manpower Reporting (CMR) requirements.

https://dodcmra.hqda.pentagon.mil/Login.aspx FOB: Destination

MAX

NET AMT

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

1001 UNDEFINED Months

OPTION Labor

CPFF

The contractor shall provide all the labor assoicated with providing the NISS solution FOB: Destination

MAX

COST

FIXED

FEE

TOTAL MAX COST +

FEE

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

1002 1 Each

OPTION Software

FFP

To include necessary software, licenses, and maintenance for the NISS solution. All inclusive price.

FOB: Destination

MAX

NET AMT

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

1003 UNDEFINE

D

Each

OPTION Travel

COST

The travel associated with is CLIN shall be in accordance with FAR 31.205-46. The cost constraint is a Not to Exceed amount of

$XXXXXXX.

FOB: Destination

MAX COST

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

1004 1 Each

OPTION Contractor Manpower Report

FFP

The contractor shall comply with the Department of Defense's Contractor Manpower Reporting (CMR) requirements.

https://dodcmra.hqda.pentagon.mil/Login.aspx FOB: Destination

MAX

NET AMT

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

2001 UNDEFINED Months

OPTION Labor

CPFF

The contractor shall provide all the labor assoicated with providing the NISS solution FOB: Destination

COST

FIXED

FEE

TOTAL MAX COST +

FEE

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

2002 1 Each

OPTION Software

FFP

To include necessary software, licenses, and maintenance for the NISS solution. All inclusive price.

FOB: Destination

MAX

NET AMT

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

2003 UNDEFINE

D

Each

OPTION Travel

COST

The travel associated with is CLIN shall be in accordance with FAR 31.205-46. The cost constraint is a Not to Exceed amount of

$XXXXXXX.

FOB: Destination

MAX COST

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

2004 1 Each

OPTION Contractor Manpower Report

FFP

The contractor shall comply with the Department of Defense's Contractor Manpower Reporting (CMR) requirements.

https://dodcmra.hqda.pentagon.mil/Login.aspx FOB: Destination

MAX

NET AMT

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

3001 UNDEFINED Months

OPTION Labor

CPFF

The contractor shall provide all the labor assoicated with providing the NISS solution FOB: Destination

MAX

COST

FIXED

FEE

TOTAL MAX COST +

FEE

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

3002 1 Each

OPTION Software

FFP

To include necessary software, licenses, and maintenance for the NISS solution. All inclusive price.

FOB: Destination

MAX

NET AMT

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

3003 UNDEFINE

D

Each

OPTION Travel

COST

The travel associated with is CLIN shall be in accordance with FAR 31.205-46. The cost constraint is a Not to Exceed amount of

$XXXXXXX.

FOB: Destination

MAX COST

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

3004 1 Each

OPTION Contractor Manpower Report

FFP

The contractor shall comply with the Department of Defense's Contractor Manpower Reporting (CMR) requirements.

https://dodcmra.hqda.pentagon.mil/Login.aspx FOB: Destination

MAX

NET AMT

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

4001 UNDEFINED Months

OPTION Labor

CPFF

The contractor shall provide all the labor assoicated with providing the NISS solution FOB: Destination

MAX

COST

FIXED

FEE

TOTAL MAX COST +

FEE

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

4002 1 Each

OPTION Software

FFP

To include necessary software, licenses, and maintenance for the NISS solution. All inclusive price.

FOB: Destination

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

4003 UNDEFINE

D

Each

OPTION Travel

COST

The travel associated with is CLIN shall be in accordance with FAR 31.205-46. The cost constraint is a Not to Exceed amount of

$XXXXXXX.

FOB: Destination

MAX COST

ITEM

NO

SUPPLIES/

SERVICES

MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

4004 1 Each

OPTION Contractor Manpower Report

FFP

The contractor shall comply with the Department of Defense's Contractor Manpower Reporting (CMR) requirements.

https://dodcmra.hqda.pentagon.mil/Login.aspx FOB: Destination

Section C - Descriptions and Specifications NISS STATEMENT OF OBJECTIVES

Introduction: As one of four Government Security Agencies (GSA) directed to implement the National Industrial Security Program (NISP) per Executive Order 12829, the Defense Security Service (DSS) provides Industrial Security Services and training to the Department of Defense (DoD) and twenty-seven other federal agencies. Administering the NISP to cleared contractors eligible to receive, handle, and protect classified information for DoD and the 27 agencies makes DSS responsible for an industrial base that includes over 13,000 cleared facilities, 40,000 classified information systems, and over 10,000 industrial security professionals. !

Purpose: There is an existing “gap” between DSS Agency capacity and national security requirements being predominantly driven by a summation of challenges found within three Agency operational activities: !

1) Process Facility Clearances (FCL)

2) 2) Conduct Proactive Monitoring

3) 3) Manage Incident Response. !

DSS currently conducts its critical missions without an integrated enterprise information technology architecture. The lack of an enterprise IT solution results in cumbersome, inefficient, and exceedingly manual processes that jeopardize the success of DSS missions. !

Five primary factors that span across the three forenamed operational activities challenge DSS’s ability to effectively administer the NISP and account for Industry’s rapidly evolving security environment: !

1. Limited ability to identify vulnerabilities and mitigate the expanding threat through consistent interaction and partnership with Industry, given resource constraints. !

2. Increasing reliance on proactive NISP stakeholder partnerships, which can be met with hesitation !

3. Scaled directorates to meet growing mission sets, resulting in potential service delivery overlap !

4. Required Department-level clarity on critical issues, such as cyber defense, fogging the Agency’s ability to determine mission effectiveness !

5. Legacy technological infrastructure out-stripped by modern information security demands, and actually hampering the Agency’s ability to provide timely support to NISP stakeholders !

The National Industrial Security System (NISS) is the working name for a new, automated business information capability that seeks to replace the legacy Industrial Security Facility Database (ISFD) and incorporate additional functionality. The NISS will be an integrated automated solution that will facilitate efficient execution of the Agency’s core mission. It will use available technology to drive smooth user workflow, enhance decision-making through stronger and timelier synthesis of information, and improve transparency pertaining to Industry’s National Industrial Security (NISP) participation. !

NISS will allow users to sift through vast volumes of information and more easily form linkages about a facility and its Key Management Personnel (KMP), effectively closing Industry’s safeguarding gaps, while allowing DSS field personnel to proactively partner with Industry on-site through Security Vulnerability Assessments (SVAs). Presently critical resources are diverted from meaningful customer engagement and identification of high-risk threats to menial data entry without an effective NISS enterprise IT solution. !

High Level Objectives for the NISS approach include the following: !

a. Expedited performance against classified contracts

i. Streamlined facility clearance (FCL) processing ii. Enhanced FOCI identification and mitigation

iii. Accelerated and improved C&A of Industry information systems

iv. Expedited production of quality information b. Enhanced data linkages to provide full risk profile

i. Increased information sharing and transparency

ii. Automated prioritization of Industry engagement (FIL)

iii. Implemented enterprise risk analytics capability c. Improved ability to make metrics-based decisions

i. Enhanced automated metrics capture and analysis

d. Improved vulnerability management from identification through mitigation

i. Improved vulnerability reporting through automation ii. Streamlined vulnerability oversight

iii. Expedited vulnerability mitigation

e. Improved threat management from identification through mitigation i. Improved threat reporting

ii. Expedited threat mitigation

f. Increased technology effectiveness and mobility

i. Create a mobile technology solution to meet mobile workforce needs

ii. Improve ability to utilize data from multiple sources, classifications, and types in a single location

iii. Improve analysis

iv. Improve discovery of unknown unknowns. Expedite data submission validation !!

NISS Required System Attributes required for the NISS include the following features: !

a. BPMN - The Defense Security Service (DSS) requires a product which enables the capturing of business operations through Business Process Modeling and Notation (BPMN) workflows with work prioritization.

b. Workflow Management – The contractor shall provide NISS users with the ability to manage workflow processes and ensures that out- of-the-box vender functional capabilities are available.

c. Facility Profile Creation – The contract shall provide an end product that will ensure that each facility has a profile within NISS that includes information such as the facility address, region, KMP list, corporate website, corporate legal structure, research data, facility actions, alerts, change conditions, workflow status, etc. The system shall visually display parent-child and related ownership hierarchies between facilities and companies.

d. Search/Content Management – The contractor shall provide a system that will enable site-wide searching for internal and external users on various information within the NISS. While search functionality provided as native capabilities will likely require further customization to meet Agency needs.

e. Reporting – The contractor shall provide a system that will calculate and display standard metrics related to all DSS processes conducted within the system. Additionally, the system should enable advanced ad-hoc reporting and analytics that can record and report historical transaction and usage data, and conduct real-time validation of the data. Reporting should facilitate the implementation of the risk management framework which includes identification of potential threats to detection of realized impacts, for the Industrial Security Supply Chain. The reporting should enable data-driven decision making to identify risks within the supply chain and enable executive level reporting for performance management.

f. Analytics – The contractor shall provide a system capable of transforming structured and unstructured data to help identify and develop meaningful and actionable information to inform business decisions and identify trends or risks. This analytic capability should allow for the easy interpretation of volumes of data, and provide historical, current and predictive views of internal (DSS) and external (Industry) operations. The system should acquire, process, and correlate data that is within the system, as well as within linked sources.

g. Integration and Interoperability – The contractor shall provide a system that will enable access to data from databases internal and external to DSS to complete internal processes and validate information included in this DSS system of record. The technical solution shall conform to DoD Guidelines and DSS infrastructure. The expectation is that the delivered product will have already incorporated external system integration activities prior to DSS Pre- Production staging.

h. Storage – The contractor shall provide a system that will allow users to upload and save documents as well as unstructured data.

i. Dashboard Portal/Single User Interface – The contractor shall provide a system that will present workflow data, notifications and messages, dependent upon roles and permission level assigned to each user. The graphical user interface (GUI) must be innovative in nature.

j. Auditing – The contractor shall provide a system with the capabilities to ensure that transactional logs of various actions are recorded and saved. This includes, but is not limited to, the overall system transactions and facility profile transactions.

k. Attribute Based Access Control (ABAC) – The contractor shall provide a system that establishes rules for users’ access, roles, and permissions within the NISS, in accordance with

NIST SP 800-162.

l. Help – The contractor shall provide a system that provides access to job aides, FAQs, and other help-related documentation.

m. Mobile Capabilities – The contractor shall provide a system that converts core NISS capabilities into a mobile version for access over mobile devices.

n. Automated Notifications/Alerts/Messaging – The contractor shall provide a system that provides the ability for internal and external users to liberally manage notifications, alerts and messages.

o. Automated Cross Domain Solution (CDS) – The contractor shall provide a system that enables automated transfer of data between NIPR and SIPR without spillage. The developer must enable a bridge for NIPR information to be ingested up to SIPR, and primary unclassified NISS SIPR information to be available down to NIPR. A near real-time, bi-directional cross-domain data solution will be required to be in place at NISS initial deployment. The CDS will be included within and throughout the workflow processes.

p. NoSQL (Not Only SQL) data repository with modular systems integration to allow for multiple transactional systems to utilize, modify and validate data

q. Data Migration – The existing legacy application contains data which will continue to be used and must be migrated into the NISS. The developer must prepare existing data so that it ports into the new system without losing functional meaning and with minimal disruption of service for daily operations. Data fields for the existing and receiving systems shall be formally documented mapping schemas for review and approved by stakeholders for accuracy.

r. GUI Interfaces – The Agency requires internal and external GUI interfaces. The interfaces should automate the exchange of Industrial Facility Clearance data, between DSS internal systems and extra- Agency systems. Timely exchange of this information will allow Agency representatives to execute proactive monitoring, risk response, and assessment responsibilities. !

NISS Delivery Increments !

Anticipated NISS Delivery increments include the following: !

a. Incorporate ISFD and E-FCL into Core NISS Foundation Capabilities – The first increment will provide DSS with core ISFD and e-FCL capabilities and establishes the foundation for accessing facility data, site navigation, and fundamental application functionality within the NISS. The first increment will centralize all processes required for managing the facility security clearance process. The estimated duration for this increment is roughly 18 months since it will include all core capabilities listed as system attributes.

b. Security Vulnerability and Incident Response Management – The second increment will provide DSS stakeholders with essential tools and information required to manage security violations, assess vulnerabilities and respond to incident reports. This increment also builds upon the functionalities developed in Increment-I by enhancing existing system functionality.

Processes include Security Vulnerability Assessment (SVA), Suspicious Contact Report (SCR), Security Violation (SV) processing, and Certification & Accreditation (C&A). The estimated duration for this increment is roughly 12 months.

c. Change Condition Monitoring – The third increment will enable DSS to efficiently and effectively perform change condition monitoring in light of all core facility data availability within the NISS. This increment allows for refinement of system functionality. Processes include Key Management Personnel (KMP) Monitoring, NATO Control Point Inspections (CPI), Triage Outreach Program (TOP), NISP Facility Oversight, and Foreign Visit Requests (FVR).

d. Mobile Access Enablement – The fourth increment will provide stakeholders with the ability to access NISS functionality in a mobile environment, increasing productivity during facility site visits and security assessments. The estimated duration for this increment is roughly 12 months.

e. Facility System Inspections (CCRI) – The fifth increment will provide the ability to electronically manage the process of scheduling and conducting DISA mandated CCRI inspections. The estimated duration for this increment is roughly 9 months, including CI Mission Enablement work.

f. Counterintelligence (CI) Mission Enablement – The sixth increment shall enable the counterintelligence mission to identify insider threats and convey timely information. The scope of this increment will be determined at a later date. The estimated duration for this increment is roughly 9 months, including the Facility System Inspections work !!

Section E - Inspection and Acceptance !!

INSPECTION AND ACCEPTANCE TERMS !

Supplies/services will be inspected/accepted at: !

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 Destination Government Destination Government

0002 Destination Government Destination Government

0003 Destination Government Destination Government

0004 Destination Government Destination Government

1001 Destination Government Destination Government

1002 Destination Government Destination Government

1003 Destination Government Destination Government

1004 Destination Government Destination Government

2001 Destination Government Destination Government

2002 Destination Government Destination Government

2003 Destination Government Destination Government

2004 Destination Government Destination Government

3001 Destination Government Destination Government

3002 Destination Government Destination Government

3003 Destination Government Destination Government

3004 Destination Government Destination Government

4001 Destination Government Destination Government

4002 Destination Government Destination Government

4003 Destination Government Destination Government

4004 Destination Government Destination Government

Section G - Contract Administration Data !

CLAUSES INCORPORATED BY FULL TEXT !!

252.201-7000 CONTRACTING OFFICER'S REPRESENTATIVE (DEC 1991) !

(a) "Definition. Contracting officer's representative" means an individual designated in accordance with subsection 201.602-2 of the Defense Federal Acquisition Regulation Supplement and authorized in writing by the contracting officer to perform specific technical or administrative functions. !

(b) If the Contracting Officer designates a contracting officer's representative (COR), the Contractor will receive a copy of the written designation. It will specify the extent of the COR's authority to act on behalf of the contracting officer. The COR is not authorized to make any commitments or changes that will affect price, quality, quantity, delivery, or any other term or condition of the contract. !

(End of clause) !!!

252.204-0011 CONTRACT-WIDE: PRORATION. (SEP 2009) !

The payment office shall make payment from each ACRN within the contract or order in the same proportion as the amount of funding currently unliquidated for each ACRN. !

(End of clause) !!!!

252.232-7003 ELECTRONIC SUBMISSION OF PAYMENT REQUESTS AND RECEIVING REPORTS (JUNE 2012) !

(a) Definitions. As used in this clause– !

(1) Contract financing payment and invoice payment have the meanings given in section 32.001 of the Federal Acquisition Regulation. !

(2) Electronic form means any automated system that transmits information electronically from the initiating system to all affected systems. Facsimile, e-mail, and scanned documents are not acceptable electronic forms for submission of payment requests. However, scanned documents are acceptable when they are part of a submission of a payment request made using Wide Area WorkFlow (WAWF) or another electronic form authorized by the Contracting Officer. !

(3) Payment request means any request for contract financing payment or invoice payment submitted by the Contractor under this contract. !

(4) Receiving report means the data required by the clause at 252.246-7000, Material Inspection and Receiving Report. !

(b) Except as provided in paragraph (c) of this clause, the Contractor shall submit payment requests and receiving reports using WAWF, in one of the following electronic formats that WAWF accepts: Electronic Data Interchange, Secure File Transfer Protocol, or World Wide Web input. Information regarding WAWF is available on the Internet at https://wawf.eb.mil/. !

(c) The Contractor may submit a payment request and receiving report using other than WAWF only when– !

(1) The Contracting Officer administering the contract for payment has determined, in writing, that electronic submission would be unduly burdensome to the Contractor. In such cases, the Contractor shall include a copy of the Contracting Officer's determination with each request for payment; !

(2) DoD makes payment for commercial transportation services provided under a Government rate tender or a contract for transportation services using a DoD-approved electronic third party payment system or other exempted vendor payment/invoicing system (e.g., PowerTrack, Transportation Financial Management System, and Cargo and Billing System);

(3) DoD makes payment for rendered health care services using the TRICARE Encounter Data System (TEDS) as the electronic format; or !

(4) When the Governmentwide commercial purchase card is used as the method of payment, only submission of the receiving report in electronic form is required. !

(d) The Contractor shall submit any non-electronic payment requests using the method or methods specified in Section G of the contract. !

(e) In addition to the requirements of this clause, the Contractor shall meet the requirements of the appropriate payment clauses in this contract when submitting payments requests. !

(End of clause) !!!!

252.232-7006 WIDE AREA WORKFLOW PAYMENT INSTRUCTIONS (MAY 2013)

(a) Definitions. As used in this clause-- !

Department of Defense Activity Address Code (DoDAAC) is a six position code that uniquely identifies a unit, activity, or organization.

Document type means the type of payment request or receiving report available for creation in Wide Area WorkFlow

(WAWF).

Local processing office (LPO) is the office responsible for payment certification when payment certification is done external to the entitlement system.

(b) Electronic invoicing. The WAWF system is the method to electronically process vendor payment requests and receiving reports, as authorized by DFARS 252.232-7003, Electronic Submission of Payment Requests and Receiving Reports.

(c) WAWF access. To access WAWF, the Contractor shall--

(1) Have a designated electronic business point of contact in the System for Award Management at https:// www.acquisition.gov; and

(2) Be registered to use WAWF at https://wawf.eb.mil/ following the step-by-step procedures for self-registration available at this Web site.

(d) WAWF training. The Contractor should follow the training instructions of the WAWF Web-Based Training Course and use the Practice Training Site before submitting payment requests through WAWF. Both can be accessed by selecting the “Web Based Training” link on the WAWF home page at https:// wawf.eb.mil/.

(e) WAWF methods of document submission. Document submissions may be via Web entry, Electronic Data Interchange, or File Transfer Protocol.

(f) WAWF payment instructions. The Contractor must use the following information when submitting payment requests and receiving reports in WAWF for this contract/order:

(1) Document type. The Contractor shall use the following document type(s). !

2-in-1 !

(Contracting Officer: Insert applicable document type(s). Note: If a “Combo” document type is identified but not supportable by the Contractor's business systems, an “Invoice” (stand-alone) and “Receiving Report” (stand-alone) document type may be used instead.)

(2) Inspection/acceptance location. The Contractor shall select the following inspection/acceptance location(s) in WAWF, as specified by the contracting officer.

N/A

(Contracting Officer: Insert inspection and acceptance locations or “Not applicable”.)

(3) Document routing. The Contractor shall use the information in the Routing Data Table below only to fill in applicable fields in WAWF when creating payment requests and receiving reports in the system.

Routing Data Table* Field Name in WAWF Data to be entered in WAWF Pay Official DoDAAC HQ0690 Issue By DoDAAC HS0021 Admin DoDAAC HS0021 Inspect By DoDAAC ____ Ship To Code HS0001 Ship From Code ____ Mark For Code ____ Service Approver (DoDAAC) ____ Service Acceptor (DoDAAC) ____ Accept at Other DoDAAC ____ LPO DoDAAC ____ DCAA Auditor DoDAAC ____ Other DoDAAC(s) ____ (*Contracting Officer: Insert applicable DoDAAC information or “See schedule” if multiple ship to/acceptance locations apply, or “Not applicable.”)

(4) Payment request and supporting documentation. The Contractor shall ensure a payment request includes appropriate contract line item and subline item descriptions of the work performed or supplies delivered, unit price/ cost per unit, fee (if applicable), and all relevant back-up documentation, as defined in DFARS Appendix F, (e.g.

timesheets) in support of each payment request.

(5) WAWF email notifications. The Contractor shall enter the email address identified below in the “Send Additional Email Notifications” field of WAWF once a document is submitted in the system. !

TBD !

(Contracting Officer: Insert applicable email addresses or “Not applicable.”)

(g) WAWF point of contact. (1) The Contractor may obtain clarification regarding invoicing in WAWF from the following contracting activity's WAWF point of contact. !

TBD !

(Contracting Officer: Insert applicable information or “Not applicable.”)

(2) For technical WAWF help, contact the WAWF helpdesk at 866-618-5988.

(End of clause) !!!

Section H - Special Contract Requirements !

252.234-7002 EARNED VALUE MANAGEMENT SYSTEM (MAY 2011) !

(a) Definitions. As used in this clause--

Acceptable earned value management system means an earned value management system that generally complies with system criteria in paragraph (b) of this clause.

Earned value management system means an earned value management system that complies with the earned value management system guidelines in the ANSI/EIA-748.

Significant deficiency means a shortcoming in the system that materially affects the ability of officials of the Department of Defense to rely upon information produced by the system that is needed for management purposes.

(b) System criteria. In the performance of this contract, the Contractor shall use--

(1) An Earned Value Management System (EVMS) that complies with the EVMS guidelines in the American National Standards Institute/Electronic Industries Alliance Standard 748, Earned Value Management Systems (ANSI/EIA-748); and

(2) Management procedures that provide for generation of timely, reliable, and verifiable information for the Contract Performance Report (CPR) and the Integrated Master Schedule (IMS) required by the CPR and IMS data items of this contract.

(c) If this contract has a value of $50 million or more, the Contractor shall use an EVMS that has been determined to be acceptable by the Cognizant Federal Agency (CFA). If, at the time of award, the Contractor's EVMS has not been determined by the CFA to be in compliance with the EVMS guidelines as stated in paragraph (b)(1) of this clause, the Contractor shall apply its current system to the contract and shall take necessary actions to meet the milestones in the Contractor's EVMS plan.

(d) If this contract has a value of less than $50 million, the Government will not make a formal determination that the Contractor's EVMS complies with the EVMS guidelines in ANSI/EIA-748 with respect to the contract. The use of the Contractor's EVMS for this contract does not imply a Government determination of the Contractor's compliance with the EVMS guidelines in ANSI/EIA-748 for application to future contracts. The Government will allow the use of a Contractor's EVMS that has been formally reviewed and determined by the CFA to be in compliance with the EVMS guidelines in ANSI/EIA-748.

(e) The Contractor shall submit notification of any proposed substantive changes to the EVMS procedures and the impact of those changes to the CFA. If this contract has a value of $50 million or more, unless a waiver is granted by the CFA, any EVMS changes proposed by the Contractor require approval of the CFA prior to implementation. The CFA will advise the Contractor of the acceptability of such changes as soon as practicable (generally within 30 calendar days) after receipt of the Contractor's notice of proposed changes. If the CFA waives the advance approval requirements, the Contractor shall disclose EVMS changes to the CFA at least 14 calendar days prior to the effective date of implementation.

(f) The Government will schedule integrated baseline reviews as early as practicable, and the review process will be conducted not later than 180 calendar days after--

(1) Contract award;

(2) The exercise of significant contract options; and

(3) The incorporation of major modifications. !

During such reviews, the Government and the Contractor will jointly assess the Contractor's baseline to be used for performance measurement to ensure complete coverage of the statement of work, logical scheduling of the work activities, adequate resourcing, and identification of inherent risks.

(g) The Contractor shall provide access to all pertinent records and data requested by the Contracting Officer or duly authorized representative as necessary to permit Government surveillance to ensure that the EVMS complies, and continues to comply, with the performance criteria referenced in paragraph (b) of this clause.

(h) When indicated by contract performance, the Contractor shall submit a request for approval to initiate an over-target baseline or over-target schedule to the Contracting Officer. The request shall include a top-level projection of cost and/or schedule growth, a determination of whether or not performance variances will be retained, and a schedule of implementation for the rebaselining. The Government will acknowledge receipt of the request in a timely manner (generally within 30 calendar days).

(i) Significant deficiencies. !

(1) The Contracting Officer will provide an initial determination to the contractor, in writing, on any significant deficiencies. The initial determination will describe the deficiency in sufficient detail to allow the Contractor to understand the deficiency.

(2) The Contractor shall respond within 30 days to a written initial determination from the Contracting Officer that identifies significant deficiencies in the Contractor's EVMS. If the Contractor disagrees with the initial determination, the Contractor shall state, in writing, its rationale for disagreeing.

(3) The Contracting Officer will evaluate the Contractor's response and notify the Contractor, in writing, of the Contracting Officer's final determination concerning--

(i) Remaining significant deficiencies;

(ii) The adequacy of any proposed or completed corrective action;

(iii) System noncompliance, when the Contractor's existing EVMS fails to comply with the earned value management system guidelines in the ANSI/EIA-748; and

(iv) System disapproval, if initial EVMS validation is not successfully completed within the timeframe approved by the Contracting Officer, or if the Contracting Officer determines that the Contractor's earned value management system contains one or more significant deficiencies in high-risk guidelines in ANSI/EIA-748 standards (guidelines 1, 3, 6, 7, 8, 9, 10, 12, 16, 21, 23, 26, 27, 28, 30, or 32). When the Contracting Officer determines that the existing earned value management system contains one or more significant deficiencies in one or more of the remaining 16 guidelines in ANSI/EIA-748 standards, the contracting officer will use discretion to disapprove the system based on input received from functional specialists and the auditor.

(4) If the Contractor receives the Contracting Officer's final determination of significant deficiencies, the Contractor shall, within 45 days of receipt of the final determination, either correct the significant deficiencies or submit an acceptable corrective action plan showing milestones and actions to eliminate the significant deficiencies.

(j) Withholding payments. If the Contracting Officer makes a final determination to disapprove the Contractor's EVMS, and the contract includes the clause at 252.242-7005, Contractor Business Systems, the Contracting Officer will withhold payments in accordance with that clause.

(k) With the exception of paragraphs (i) and (j) of this clause, the Contractor shall require its subcontractors to comply with EVMS requirements as follows:

(1) For subcontracts valued at $50 million or more, the following subcontractors shall comply with the requirements of this clause: !

[Contracting Officer to insert names of subcontractors (or subcontracted effort if subcontractors have not been selected) designated for application of the EVMS requirements of this clause.] !

TBD !

(2) For subcontracts valued at less than $50 million, the following subcontractors shall comply with the requirements of this clause, excluding the requirements of paragraph (c) of this clause:

[Contracting Officer to insert names of subcontractors (or subcontracted effort if subcontractors have not been selected) designated for application of the EVMS requirements of this clause. TBD (End of clause)

Section I - Contract Clauses !

CLAUSES INCORPORATED BY REFERENCE !!

52.204-2 Security Requirements AUG 1996

52.204-9 Personal Identity Verification of Contractor Personnel JAN 2011

52.204-12 Data Universal Numbering System Number Maintenance DEC 2012

52.215-2 Audit and Records - Negotiation OCT 2010

52.215-8 Order of Precedence - Uniform Contract Format OCT 1997

52.215-19 Notification of Ownership Changes OCT 1997

52.215-22 Limitation on Pass Through Charges - Identification of Sub contract Effort

OCT 1997

52.215-23 Limitation on Pass Through Charges OCT 2009

52.216-7 Allowable Cost And Payment JUN 2013

52.217-4 Evaluation of Options Exercised at Time of Contract Award

JUN 1988

52.217-5 Evaluation of Options JUL 1990

52.217-8 Option to Extend Services NOV 1999

52.217-9 Option to Extend the Term of the Contract MAR 2000

52.219-4 Notice of Price Evaluation Preference for HUBZone Small Business Concerns

OCT 2014

52.219-8 Utilization of Small Business Concerns OCT 2014

52.222-1 Notice To The Government Of Labor Disputes FEB 1997

52.222-21 Prohibition Of Segregated Facilities FEB 1999

52.222-26 Equal Opportunity MAR 2007

52.222-50 Combating Trafficking in Persons FEB 2009

52.223-18 Encouraging Contractor Policies To Ban Text Messaging While Driving

AUG 2011

52.225-13 Restrictions on Certain Foreign Purchases JUN 2008

52.225-25 Prohibition on Contracting with Entities Engaging in Certain Activities or Transactions Relating to Iran-- Representation and Certifications.

DEC 2012

52.227-1 Authorization and Consent DEC 2007

52.227-2 Notice And Assistance Regarding Patent And Copyright Infringement

DEC 2007

52.227-14 Rights in Data--General MAY 2014

52.227-16 Additional Data Requirements JUN 1987

52.228-7 Insurance--Liability To Third Persons MAR 1996

52.232-18 Availability Of Funds APR 1984

52.232-20 Limitation Of Cost APR 1984

52.232-22 Limitation Of Funds APR 1984

52.232-39 Unenforceability of Unauthorized Obligations JUN 2013

52.232-40 Providing Accelerated Payments to Small Business Subcontractors

DEC 2013

52.233-1 Disputes MAY 2014

52.233-3 Alt I Protest After Award (Aug 1996) - Alternate I JUN 1985

52.233-4 Applicable Law for Breach of Contract Claim OCT 2004

52.242-1 Notice of Intent to Disallow Costs APR 1984

52.242-4 Certification of Final Indirect Costs JAN 1997

52.243-2 Alt V Changes--Cost-Reimbursement (Aug 1987) - Alternate V APR 1984

52.243-6 Change Order Accounting APR 1984

52.245-1 Government Property APR 2012

52.245-9 Use And Charges APR 2012

52.246-5 Inspection Of Services Cost-Reimbursement APR 1984

52.246-9 Inspection Of Research And Development (Short Form) APR 1984

52.247-17 Charges APR 1984

52.247-27 Contract Not Affected by Oral Agreement APR 1984

52.247-64 Alt II Preference for Privately Owned U.S. - Flag Commercial Vessels (Apr 2003) - Alternate II

FEB 2006

52.249-6 Termination (Cost Reimbursement) MAY 2004

52.253-1 Computer Generated Forms JAN 1991

252.203-7000 Requirements Relating to Compensation of Former DoD Officials

SEP 2011

252.203-7002 Requirement to Inform Employees of Whistleblower Rights

SEP 2013

252.204-7000 Disclosure Of Information AUG 2013

252.204-7003 Control Of Government Personnel Work Product APR 1992

252.204-7005 Oral Attestation of Security Responsibilities NOV 2001

252.211-7007 Reporting of Government-Furnished Property AUG 2012

252.225-7001 Buy American And Balance Of Payments Program-- Basic (Nov 2014)

NOV 2014

252.225-7002 Qualifying Country Sources As Subcontractors DEC 2012

252.225-7013 Duty-Free Entry--Basic (Nov 2014) NOV 2014

252.225-7048 Export-Controlled Items JUN 2013

252.227-7013 Rights in Technical Data--Noncommercial Items FEB 2014

252.227-7014 Rights in Noncommercial Computer Software and Noncommercial Computer Software Documentation

FEB 2014

252.227-7016 Rights in Bid or Proposal Information JAN 2011

252.227-7019 Validation of Asserted Restrictions--Computer Software SEP 2011

252.227-7030 Technical Data--Withholding Of Payment MAR 2000

52.216-18 ORDERING. (OCT 1995) !

(a) Any supplies and services to be furnished under this contract shall be ordered by issuance of delivery orders or task orders by the individuals or activities designated in the Schedule. Such orders may be issued from the date of contract award through completion of final option. !

(b) All delivery orders or task orders are subject to the terms and conditions of this contract. In the event of conflict between a delivery order or task order and this contract, the contract shall control. !

(c) If mailed, a delivery order or task order is considered "issued" when the Government deposits the order in the mail. Orders may be issued orally, by facsimile, or by electronic commerce methods only if authorized in the Schedule. !

(End of clause) !!!

52.216-19 ORDER LIMITATIONS. (OCT 1995) !

(a) Minimum order. When the Government requires supplies or services covered by this contract in an amount of less than TBD, the Government is not obligated to purchase, nor is the Contractor obligated to furnish, those supplies or services under the contract. !

(b) Maximum order. The Contractor is not obligated to honor: !

(1) Any order for a single item in excess of TBD; !

(2) Any order for a combination of items in excess of TBD; or !

252.227-7037 Validation of Restrictive Markings on Technical Data JUN 2013

252.227-7038 Patent Rights--Ownership by the Contractor (Large Business)

JUN 2012

252.232-7010 Levies on Contract Payments DEC 2006

252.234-7001 Notice of Earned Value Management System APR 2008

252.235-7011 Final Scientific or Technical Report NOV 2004

252.237-7010 Prohibition on Interrogation of Detainees by Contractor Personnel

JUN 2013

252.239-7017 Notice of Supply Chain Risk NOV 2013

252.242-7005 Contractor Business Systems FEB 2012

252.242-7006 Accounting System Administration FEB 2012

252.244-7000 Subcontracts for Commercial Items JUN 2013

252.245-7001 Tagging, Labeling, and Marking of Government-Furnished Property

APR 2012

252.245-7002 Reporting Loss of Government Property APR 2012

252.245-7003 Contractor Property Management System Administration APR 2012

252.245-7004 Reporting, Reutilization, and Disposal MAY 2013

252.247-7023 Alt

II

Transportation of Supplies by Sea (APR 2014) Alternate II APR 2014

(3) A series of orders from the same ordering office within TBD days that together call for quantities exceeding the limitation in subparagraph (1) or (2) above. !

(c) If this is a requirements contract (i.e., includes the Requirements clause at subsection 52.216-21 of the Federal Acquisition Regulation (FAR)), the Government is not required to order a part of any one requirement from the Contractor if that requirement exceeds the maximum-order limitations in paragraph (b) above. !

(d) Notwithstanding paragraphs (b) and (c) above, the Contractor shall honor any order exceeding the maximum order limitations in paragraph (b), unless that order (or orders) is returned to the ordering office within TBD days after issuance, with written notice stating the Contractor's intent not to ship the item (or items) called for and the reasons. Upon receiving this notice, the Government may acquire the supplies or services from another source. !

(End of clause) !!!

52.216-22 INDEFINITE QUANTITY. (OCT 1995) !

(a) This is an indefinite-quantity contract for the supplies or services specified, and effective for the period stated, in the Schedule. The quantities of supplies and services specified in the Schedule are estimates only and are not purchased by this contract. !

(b) Delivery or performance shall be made only as authorized by orders issued in accordance with the Ordering clause. The Contractor shall furnish to the Government, when and if ordered, the supplies or services specified in the Schedule up to and including the quantity designated in the Schedule as the "maximum". The Government shall order at least the quantity of supplies or services designated in the Schedule as the "minimum". !

(c) Except for any limitations on quantities in the Order Limitations clause or in the Schedule, there is no limit on the number of orders that may be issued. The Government may issue orders requiring delivery to multiple destinations or performance at multiple locations. !

(d) Any order issued during the effective period of this contract and not completed within that period shall be completed by the Contractor within the time specified in the order. The contract shall govern the Contractor's and Government's rights and obligations with respect to that order to the same extent as if the order were completed during the contract's effective period; provided, that the Contractor shall not be required to make any deliveries under this contract after the expiration date of the final task order . !

(End of clause) !!!

52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998) !

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es): !!

http://farsite.hill.af.mil/ or https://acquisition.gov/ !

(End of clause) !!!

252.216-7006 ORDERING (MAY 2011) !

(a) Any supplies and services to be furnished under this contract shall be ordered by issuance of delivery orders or task orders by the individuals or activities designated in the contract schedule. Such orders may be issued from ______date of contract award _____ through _five years from the date of contract award___.

(b) All delivery orders or task orders are subject to the terms and conditions of this contract. In the event of conflict between a delivery order or task order and this contract, the contract shall control.

http://farsite.hill.af.mil/ https://acquisition.gov/

(c)(1) If issued electronically, the order is considered ``issued'' when a copy has been posted to the Electronic Document Access system, and notice has been sent to the Contractor.

(2) If mailed or transmitted by facsimile, a delivery order or task order is considered ``issued'' when the Government deposits the order in the mail or transmits by facsimile. Mailing includes transmittal by U.S. mail or private delivery services.

(3) Orders may be issued orally only if authorized in the schedule.

(End of Clause) !!

252.235-7010 Acknowledgment of Support and Disclaimer. (MAY 1995) !

(a) The Contractor shall include an acknowledgment of the Government's support in the publication of any material based on or developed under this contract, stated in the following terms: This material is based upon work supported by the Defense Security Service under Contract No. HS0021-15-D-0011. !

(b) All material, except scientific articles or papers published in scientific journals, must, in addition to any notices or disclaimers by the Contractor, also contain the following disclaimer: Any opinions, findings and conclusions or recommendations expressed in this material are those of the author(s) and do not necessarily reflect the views of the Defense Security Service. !

(End of clause) !

Section J - List of Documents, Exhibits and Other Attachments !

ATTACHMENTS IN READING ROOM !

NISS Reading Room Content !!

1) NISS Requirements Definition Document (RDD)

2) Initial Facility Clearance (iFCL) Use Case

3) Capabilities Increment Mapping, HLOs slide deck

4) NISS Acquisition Friendly Business Case Exert

5) Hardware and Software Specifications

6) Work Breakdown Structure (WBS)

7) Reporting Requirements

8) 508 Compliance Documentation

9) DoD Risk Management Framework 8510.01

10) DIACAP IA Controls

11) Joint Information Environment (JIE) – DoD Interoperability

Guidance

12) Open Systems Language

13) Software Assurance Guidance

Section K - Representations, Certifications and Other Statements of Offerors !

CLAUSES INCORPORATED BY REFERENCE !!

CLAUSES INCORPORATED BY FULL TEXT !

52.204-8 Annual Representations and Certifications DEC 2014 (a)

• (1) The North American Industry classification System (NAICS) code for this acquisition is ____________ [insert NAICS code].

(2) The small business size standard is ____________ [insert size standard].

(3) The small business size standard for a concern which submits an offer in its own name, other than on a construction or service contract, but which proposes to furnish a product which it did not itself manufacture, is 500 employees.

(b)

• (1) If the provision at 52.204-7, System for Award Management, is included in this solicitation, paragraph (d) of this provision applies.

(2) If the provision at 52.204-7 is not included in this solicitation, and the offeror is currently registered in the System for Award Management (SAM), and has completed the Representations and Certifications section of SAM electronically, the offeror may choose to use paragraph (d) of this provision instead of completing the corresponding individual representations and certification in the solicitation. The offeror shall indicate which option applies by checking one of the following boxes:

◦ [_] (i) Paragraph (d) applies.

[_] (ii) Paragraph (d) does not apply and the offeror has completed the individual representations and certifications in the solicitation.

(c)

• (1) The following representations or certifications in SAM are applicable to this solicitation as indicated:

◦ (i) 52.203-2, Certificate of Independent Price Determination. This provision applies to solicitations when a firm-fixed-price contract or fixed-price contract with economic price adjustment is contemplated, unless—

▪ (A) The acquisition is to be made under the simplified acquisition procedures in Part 13;

(B) The solicitation is a request for technical proposals under two-step sealed bidding procedures; or

(C) The solicitation is for utility services for which rates are set by law or regulation.

◦ (ii) 52.203-11, Certification and Disclosure Regarding Payments to Influence Certain Federal Transactions. This provision applies to solicitations expected to exceed $150,000.

(iii) 52.204-3, Taxpayer Identification. This provision applies to solicitations that do not include the provision at 52.204-7, System for Award Management.

(iv) 52.204-5, Women-Owned Business (Other Than Small Business). This provision applies to solicitations that—

▪ (A) Are not set aside for small business concerns;

(B) Exceed the simplified acquisition threshold; and

(C) Are for contracts that will be performed in the United States or its outlying areas.

◦ (v) 52.209-2, Prohibition on Contracting with Inverted Domestic Corporations—Representation.

(vi) 52.209-5; Certification Regarding Responsibility Matters. This provision applies to solicitations where the contract value is expected to exceed the simplified acquisition threshold.

(vii) 52.214-14, Place of Performance--Sealed Bidding. This provision applies to invitations for bids except those in which the place of performance is specified by the Government.

(viii) 52.215-6, Place of Performance. This provision applies to solicitations unless the place of performance is specified by the Government.

(ix) 52.219-1, Small Business Program Representations (Basic & Alternate I). This provision applies to solicitations when the contract will be performed in the United States or its outlying areas.

52.204-3 !

52.204-9

Taxpayer Identification !

Personal Identity Verification Contractor Personel

OCT 1998 !

JAN 2011

52.204-10 Reporting Executive Compensation and First-Tier Subcontract Awards

JUL 2013

252.227-7017 Identification and…